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* NOTICES * 

Japan Patent Office is not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2. **** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1] In a property verification method of verifying whether a finite state machine showing 
actuation of a synchronous system sequential machine filling a property showing functional 
specifications A single pass expression which shows a condition set train of a configuration of that an 
endless loop connected with one condition set train which does not have one condition set train or 
branching without branching as a property for verification is inputted. Change into a procedure train 
which combined a predetermined procedure which can perform said single pass expression only by 
image computation in said finite state machine one by one, and each procedure shown in said procedure 
train is performed. A property verification method characterized by asking for a condition set which 
goes via pass of a state transition corresponding to said single pass expression, and notifying example 
discovery or those without an example based on whether an obtained condition set is empty class. 
[Claim 2] A property verification method characterized by inputting count tree logical expression, 
changing said count tree logical expression into a single pass expression according to predetermined 
transformation rule, and presenting transform processing to a procedure train as information showing a 
property for verification in a property verification method according to claim 1. 
[Claim 3] In a property verification method of verifying whether a finite state machine showing 
actuation of a synchronous system sequential machine filling a property showing functional 
specifications Count tree logical expression is inputted as information showing a property for 
verification. Change into a procedure train which combined a predetermined procedure which can 
perform said count tree logical expression only by image computation in said finite state machine one by 
one according to predetermined transformation rule, and each procedure shown in said procedure train is 
performed. A property verification method characterized by asking for a condition set which goes via 
pass of a state transition corresponding to said single pass expression, and notifying example discovery 
or those without an example based on whether an obtained condition set is empty class. 
[Claim 4] In a property verification method according to claim 2 or 3, it is based on predetermined 
conditions. Application of reverse image count of inputted count tree logical expression separates into a 
required subexpression and other count tree logical expression, and performs reverse image computation 
about said subexpression. A property verification method characterized by asking for a propositional- 
logic type showing a condition set train, compounding said propositional-logic type and count tree 
logical expression of said others, and presenting latter processing. 

[Claim 5] Property verification equipment which verifies whether a finite state machine showing 
actuation of a synchronous system sequential machine characterized by providing the following is filling 
a property showing functional specifications A single pass expression input means to input a single pass 
expression which shows a condition set train of a configuration of that an endless loop connected with 
one condition set train which does not have one condition set train or branching without branching as a 
property for verification A procedure train conversion means to change said single pass expression into 
a procedure train which combined a predetermined procedure one by one A data-processing means to 
ask for a condition set which performs image computation in said finite state machine, and goes via pass 
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of a state transition corresponding to said single pass expression according to each procedure shown in 
said procedure train A judgment means to judge whether an obtained condition set is empty class 
[Claim 6] It is property verification equipment carry out that a single pass expression input means is the 
configuration which it had in a logical-expression input means input count tree logical expression 
showing a property for verification, and an expression conversion means change said count tree logical 
expression into a single pass expression, and present processing of a procedure train conversion means 
with it according to predetermined transformation rule as the feature in property verification equipment 
according to claim 5. 

[Claim 7] Property verification equipment which verifies whether a finite state machine showing 
actuation of a synchronous system sequential machine characterized by providing the following is filling 
a property showing functional specifications A logical expression input means to input count tree logical 
expression showing a property for verification A transform-processing means to change said count tree 
logical expression into a procedure train which combined a predetermined procedure one by one 
according to predetermined transformation rule A data-processing means to ask for a condition set 
which performs image computation in said finite state machine, and goes via pass of a state transition 
corresponding to said single pass expression according to each procedure shown in said procedure train 
A judgment means to judge whether an obtained condition set is empty class 

[Claim 8] In property verification equipment according to claim 6 or 7 a logical expression input means 
A separation means to separate into a reception means to receive an input of count tree logical 
expression showing a property, and a subexpression and other count tree logical expression by which 
said count tree logical expression is needed for application of reverse image computation, A reverse 
image count means to ask for a propositional-logic type in which applying reverse image computation to 
said subexpression, and showing a condition set, Property verification equipment characterized by being 
the configuration equipped with a synthetic means to output as count tree logical expression with which 
said propositional-logic type and count tree logical expression of said others are compounded, and a 
property is expressed. 



[Translation done.] 
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DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[The technical field to which invention belongs] It is related with the property verification method and 
equipment with which the model of the logical unit to which this invention was given with the finite 
state machine verifies whether the functional specifications of a logical unit are filled. A finite state 
machine is defined as a finite automaton with an output, and is expressed with Set Q and the input 
alphabet sigma of a condition, the output alphabet phi, the transition relational expression delta, the 
output relational expression lambda, and 6 **** of the initial-state set I like a formula (1). 
M= (Q, sigma, phi, delta, lambda, I) ... (1) 

Since non-deterministic transition is expressed, the transition relational expression delta mentioned 
above is a function which determines the following condition by taking 1 as a value, if it may change in 
degree condition when the input is given in the present condition, and taking 0 as a value, if there is 
nothing, when an actual condition object, degree condition, and an input are given. Here, since all 
synchronous sequential circuits can be modeled with a finite state machine in principle, in case a logical 
unit is designed, the method of using a finite state machine as the specification is used widely. For 
example, in the circuit design by logic synthesis, the method of changing into a finite state machine the 
specification of equipment expressed with design-description language, and a flip-flop and a register 
realizing each condition, and realizing transition relational expression and output relational expression in 
a combinational circuit is common. Thus, the verification activity of the model of the designed logical 
unit consists of various phases from the verification activity about abstract specification to the 
verification activity about actuation of an actual circuit, these phases - inside, since verification of 
functional specifications can expect the error detection in the earliest phase of layout of a logical unit, 
the quick and positive verification method is needed. 
[0002] 

[Description of the Prior Art] As the technique of verifying the functional specifications of a logical 
unit, it roughly divides and the logic simulation technique and the formal verification technique are 
mentioned. It is the technique of verifying the justification of the model of a logical unit by investigating 
whether the logic simulation technique is in agreement with the output from which a suitable input is 
applied to the model of a logical unit, actuation of a logical unit is simulated, and the obtained output is 
obtained from the original finite state machine. 

[0003] Therefore, by the logic simulation technique, the activity which creates input data in 
consideration of various conditions is indispensable, and cannot verify about the condition which was 
not taken into consideration in creation of this input data. On the other hand, the formal verification 
technique verifies mathematically whether the property which the finite state machine whose model of a 
logical unit is origin is filling is realized. 

[0004] in addition, formal verification - being related - for example, "formal verification technique 
based on logical function processing" Hiraishi, Hamaguchi, information processing, and Vol.35 
(8):pp710- please refer to reference, such as 718 and 1994 (reference 1 is called hereafter). The symbolic 
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model inspection technique which expresses a property as the formal verification technique in the count 
tree logic which is a kind of tense logic, With omega-automaton which extended acceptance conditions 
that it should correspond to the input train of infinity A property The language inclusion inspection 
technique to express (R.) [ Hojati, R.KBrayton, ] [ and R.P.Kurshan."BDD-based debugging of designs 
using languagecontainment ] and fair CTL." In Proceedings of the Conference on Computer Aided 
Verification and 1993 are proposed. 

[0005] It is the technique of verifying whether the model of a logical unit satisfies specification by the 
symbolic model inspection technique's expressing the logical unit model of Kripke structure using 
logical function, and inspecting whether the condition set which is not the empty with which are 
satisfied of the specification expressed with count tree logic exists among the formal verification 
technique. Here, the Kripke structure K is the finite set S of a condition, and the transition relation R 
between conditions and the set SO of an initial-state point. It is a kind of the non-deterministic finite 
automaton expressed with each condition like a formula (2) using the set L of the primitive proposition 
used as truth. 
[0006] 

K= (S, R, SO, L) ... (2) 

moreover, count tree logic ~ a kind of tense logic - it is - the usual logical operator - in addition, the 
tense operator F with which it expresses "when it is" with the operator E showing the operator A 
showing all **, and existence - "- always - " ~ it is expressed using the tense operator U showing the 
period until [ "until" ] the tense operator X showing the tense operator G and the "degree" to express. 
[0007] For example, the tense logic AGa shows the purport in which logical expression a is materialized 
in all the condition sets that can reach from an initial state. In this case, in the model of a logical unit, all 
the routes that can change from an initial state are followed, and all those routes should just investigate 
whether it arrives at the condition that logical expression a is materialized. 

[0008] That is, the verification activity in the symbolic model inspection technique follows the state 
transition of Kripke structure, in each condition, it is the activity which checks whether the count tree 
logical expression showing specification is materialized, and this activity can result in the set operation 
which asks for the minimum fix point or the maximum fix point on the model which used the formula of 
count tree logic. Such a set operation is realized by combining the image count Image ({q}) which asks 
for the condition set which can reach by one transition from a certain condition set {q}, and reverse 
image count Image- 1 ({q}) which ask for the condition set which can reach a certain condition set {q} 
by 1 time of the state transition. 

[0009] For example, as shown in drawing 1 1 , it is nine condition qO -q8. In the example of a finite state 

machine expressed with the state transition of a between, the example of the result of having performed 

image count and reverse image count is shown in a formula (6) from a formula (3). 

Image({q0})={q0,ql,q2,q3}...(3) 

Image({q0, q8}) = {q2, q3, q5, q6, q8} ... (4) 

Image-l({q0})={q0,ql}...(5) 

Image-l({q5}) = {ql, q2, q3, q4} ... (6) 

the finite state machine shown in this drawing 1 1 - setting - for example, condition ql the time of 
verifying the tense logic AF p using the shown logical expression p - initial state qO from - all the 
routes that can change image count from a repeat and an initial state one by one - condition ql What is 
necessary is just to investigate whether it reaches or not. the case where the tense logic EF p is verified 
on the other hand - condition ql from - reverse image count - repeating - initial state qO What is 
necessary is just to investigate whether there is any reaching route. 

[0010] By the way, in the actual symbolic model inspection technique, when the technique of 
transposing a set operation to logical function processing is common (reference 1 reference) and 
expresses logical function in a bisection decision graph, the increase in efficiency of logical function 
processing is attained (R. E.Bryant. "Graph based algorithm for boolean function manipulation." IEEE 
Trans.Comput., C-35(8):pp 677-691, 1986.). 

[001 1] Moreover, the technique of aiming at the cutback of the magnitude of a bisection decision graph 
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which expresses degree condition as a function of the present condition and an input (the input of a 
dimension and new input), and expresses state-transition relation is also proposed by applying and 
controlling a new input into a state-transition-related non-deterministic portion. 
[0012] 

[Problem(s) to be Solved by the Invention] As mentioned above, when a bisection decision graph 
expresses non-deterministic transition relation, as shown in the column of "having no function-izing" of 
drawing 12 , the image count and reverse image count which are used as a verification procedure can be 
processed by the time amount of the almost same order. 

[0013] However, in this case, it depends on an input variable for the number of nodes which shows the 
magnitude of a bisection decision graph, and in being the worst, the number of nodes increases 
exponentially according to buildup of an input variable. For this reason, since memory space huge since 
a bisection decision graph is stored was needed when it applies to the model of a logical unit with the 
large number of conditions also in the model for an experiment, if it remained as it is, having treated 
with a realistic computing system was almost impossible. 

[0014] It sets to drawing 12 and is 300MB. It is Sign space to the column which corresponds about the 
model (for example, vpp, pipe-1) it became impossible since the above memory space was needed 
verifying. It was given and shown. While the magnitude of a bisection decision graph can be suppressed 
on the other hand in the magnitude which can be processed with a realistic computing system as shown 
in a column "with function-ized" when state-transition relation is expressed functionally and the cutback 
of the magnitude of a bisection decision graph is aimed at, the processing time which reverse image 
count takes increases remarkably. [ of drawing 12 ] Since [ the ] the reverse image count is used 
abundantly in the verification activity in the symbolic model inspection technique rather than image 
count, the time amount which the whole verification activity takes will increase substantially, and it will 
become impossible to treat by the throughput of a realistic computing system on the other hand 
according to buildup of the time amount which reverse image count takes. 
[0015] For this reason, in having used the conventional technique as it was, the magnitude or the 
processing time needed of the memory needed exploded, and verifying the logical unit of the magnitude 
equivalent to an actual processor etc. was hardly completed. 

[0016] By the way, in the conventional technique mentioned above, it is all premised on enabling a 
verification activity corresponding to all the properties that can be expressed by count tree logic. 
However, it turns out experientially that it is [ of the property which can express a property to verify in a 
logical unit by count tree logic ] a part very much. 

[0017] For example, tense logical expression "EF p" shows "the purport which can reach the condition 
set Qp of which logical expression p consists from an initial state", shows the prohibition condition that 
a logical unit must not fall with logical expression p, and when verifying the property of a purport with 
which the model of a logical unit does not lapse into a prohibition condition, it is used frequently. 
Moreover, tense logical expression "AG (p->AF q)" is frequently used, when verifying the property of 
the purport which a response surely generates, if the purport "which passes along the condition set in 
which logical expression q surely consists of the subset which can reach from an initial state among the 
condition sets of which logical expression p consists even if it passes along what kind of pass" is shown, 
for example, a request occurs. 

[0018] The example of the tense logical expression "EF p" mentioned above is an initial state to the 
condition set Qp. It becomes the condition set train in which it results, and on the other hand, the "AG 
(p->AF q)" counter example serves as a condition set train which always results in the loop of which 
logical expression **q consists, after passing along the condition set in which logical expression p 
consists of an initial state. [ of tense logical expression ] Each of these condition set trains has 
composition which the condition set train used as an endless loop connected with the tail of one 
condition set train without branching, or such one condition set train. The property which the 
configuration of such a condition set train is called single pass, and can express an example or a counter 
example by the condition set train of a single pass configuration hereafter is called the property of a 
single pass expression. 
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[0019] By the way, according to presumption of artificers, it is thought that the property of a single pass 
expression which was mentioned above occupies 95% from 90% of the property set as the object of a 
verification activity in the model of a logical unit. Therefore, if the efficiency of the verification about 
the property of a single pass expression can be increased, it is possible to increase substantially the 
efficiency of the whole verification activity of a logical unit model. 

[0020] This invention aims at offering the property verification method and equipment compatible in the 
cutback of memory magnitude, and compaction of the processing time in symbolic model detection 
method. 
[0021] 

[Means for Solving the Problem] Drawing 1 (a) and (b) It is drawing showing a principle of a property 
verification method of claim 1 and claim 2. 

[0022] In a property verification method of verifying whether invention of claim 1 filling a property 
with which a finite state machine showing actuation of a synchronous system sequential machine 
expresses functional specifications A single pass expression which shows a condition set train of a 
configuration of that an endless loop connected with one condition set train which does not have one 
condition set train or branching without branching as a property for verification is inputted. Change into 
a procedure train which combined a predetermined procedure which can perform a single pass 
expression only by image computation in a finite state machine one by one, and each procedure shown 
in a procedure train is performed. It asks for a condition set which goes via pass of a state transition 
corresponding to a single pass expression, and is characterized by notifying example discovery or those 
without an example based on whether an obtained condition set is empty class. 
[0023] Invention of claim 1 can ask for a condition set which fills a property by performing image 
computation according to a procedure train which changed an inputted single pass expression and was 
acquired, and can verify a property based on whether this condition set is empty class. That is, if a single 
pass expression of a property for verification is possible, since the verification activity is realizable only 
using image computation, in symbolic model detection method, it will become possible to be compatible 
in a cutback of memory magnitude and compaction of the processing time by having applied 
degradation of a bisection decision graph by state-transition-related function-izing. 
[0024] In a property verification method according to claim 1, as information showing a property for 
verification, count tree logical expression is inputted, and invention of claim 2 changes count tree logical 
expression into a single pass expression according to predetermined transformation rule, and is 
characterized by presenting transform processing to a procedure train. Since invention of claim 2 can 
change count tree logical expression into a single pass expression and can present transform processing 
to a procedure train with it, it becomes possible [ using for verification of a property expressed with 
count tree logical expression ]. 

[0025] Drawing ! (a) and (b) It is drawing showing a principle of a property verification method of 
claim 3 and claim 4. In a property verification method of verifying whether invention of claim 3 filling a 
property with which a finite state machine showing actuation of a synchronous system sequential 
machine expresses functional specifications Count tree logical expression is inputted as information 
showing a property for verification. Change into a procedure train which combined a predetermined 
procedure which can perform count tree logical expression only by image computation in a finite state 
machine one by one according to predetermined transformation rule, and each procedure shown in a 
procedure train is performed. It asks for a condition set which goes via pass of a state transition 
corresponding to a single pass expression, and is characterized by notifying example discovery or those 
without an example based on whether an obtained condition set is empty class. 
[0026] By considering a process in which count tree logical expression is directly changed into a 
procedure train, invention of claim 3 can reduce procedures required for verification of a property 
expressed with computer logical expression, and can increase further the efficiency of a property 
verification activity in which a single pass expression is possible. Invention of claim 4 is set to a 
property verification method according to claim 2 or 3. Based on predetermined conditions, application 
of reverse image count of inputted count tree logical expression separates into a required subexpression 
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and other count tree logical expression, and performs reverse image computation about a subexpression. 
It is characterized by asking for a propositional-logic type showing a condition set train, compounding a 
propositional-logic type and other count tree logical expression, and presenting latter processing. 
[0027] Invention of claim 4 can cancel a limit about a property for verification by applying reverse 
image computation only about some subexpressions of count tree logical expression, compounding a 
propositional-logic type obtained as the result to the original computer logical expression, and 
presenting verification processing of a property. It becomes possible to make applicable to verification 
all properties that can be expressed with count tree logical expression by this. 
[0028] Drawing 3 is drawing showing a principle of property verification equipment of claim 5 and 
claim 6. In property verification equipment which verifies whether invention of claim 5 is filling a 
property with which a finite state machine showing actuation of a synchronous system sequential 
machine expresses functional specifications A single pass expression input means 1 1 1 to input a single 
pass expression which shows a condition set train of a configuration of that an endless loop connected 
with one condition set train which does not have one condition set train or branching without branching 
as a property for verification, A procedure train conversion means 1 12 to change a single pass 
expression into a procedure train which combined a predetermined procedure one by one, According to 
each procedure shown in a procedure train, image computation in a finite state machine is performed. It 
is characterized by having a data-processing means 1 13 to ask for a condition set which goes via pass of 
a state transition corresponding to a single pass expression, and a judgment means 114 to judge whether 
an obtained condition set is empty class. 

[0029] The property verification method of having stated at claim 1 can apply, and the property shown 
with a single pass expression can verify by invention of claim 5 changing into a procedure train the 
single pass expression which received through the single pass expression input means 111 with a 
procedure train conversion means 112, and offering the condition set from which the data-processing 
means 1 13 operated and it was obtained to processing of a judgment means 1 14 according to this 
procedure train. 

[0030] Since the verification activity is realizable by this about a property in which a single pass 
expression is possible only using image computation, in symbolic model detection method, it becomes 
possible to be compatible in a cutback of memory magnitude and compaction of the processing time by 
having applied degradation of a bisection decision graph by state-transition-related function-izing. 
[0031] Invention of claim 6 carries out that a single pass expression input means 1 1 1 is the configuration 
of having had a logical -expression input means 121 input count tree logical expression showing a 
property for verification, and an expression conversion means 122 change count tree logical expression 
into a single pass expression, and present processing of the procedure train conversion means 112 with it 
according to predetermined transformation rule as the feature in property verification equipment 
according to claim 5. 

[0032] According to an input of computer logical expression by the logical expression input means 121, 
invention of claim 6 can verify a property expressed with count tree logical expression, when the 
expression conversion means 122 operates. Drawin g 4 is drawing showing a principle of property 
verification equipment of claim 7 and claim 8. In property verification equipment which verifies 
whether invention of claim 7 is filling a property with which a finite state machine showing actuation of 
a synchronous system sequential machine expresses functional specifications A logical expression input 
means 121 to input count tree logical expression showing a property for verification, A transform- 
processing means 123 to change count tree logical expression into a procedure train which combined a 
predetermined procedure one by one according to predetermined transformation rule, According to each 
procedure shown in a procedure train, image computation in a finite state machine is performed. It is 
characterized by having a data-processing means 1 13 to ask for a condition set which goes via pass of a 
state transition corresponding to a single pass expression, and a judgment means 114 to judge whether 
an obtained condition set is empty class. 

[0033] Invention of claim 7 becomes possible [ doing still more nearly promptly a verification activity 
of a property expressed with count tree logical expression ], when the transform-processing means 123 
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changes directly into a procedure train count tree logical expression received through the logical 
expression input means 121 and eliminates the need of going via a single pass expression. Invention of 
claim 8 is set to property verification equipment according to claim 6 or 7. The logical expression input 
means 121 A reception means 124 to receive an input of count tree logical expression showing a 
property, A separation means 125 to separate into a subexpression and other count tree logical 
expression by which count tree logical expression is needed for application of reverse image 
computation, Reverse image computation is applied to a subexpression, a reverse image count means 
126 to ask for a propositional-logic type showing a condition set, and a propositional-logic type and 
other count tree logical expression are compounded, and it is characterized by being the configuration 
equipped with a synthetic means 127 to output as count tree logical expression showing a property. 
[0034] It is convertible to the count tree logical expression which can single pass express the count tree 
logical expression containing a subexpression which needs reverse image count by the separation means 
125 separating a part of count tree logical expression received through the reception means 124, and 
invention of claim 8 presenting processing of the reverse image count means 126 with it, and 
compounding the propositional-logic type obtained by reverse image count by the synthetic means 127 
to the original count tree logical expression. 

[0035] This cancels a limit about a property used as an object for verification, and since a verification 
activity can be done according to an input of count tree logical expression showing all properties, 
property verification equipment excellent in versatility is realizable. 
[0036] 

[Embodiment of the Invention] Hereafter, the operation gestalt of this invention is explained to details 
based on a drawing. 

[0037] Drawing 5 is drawing showing the operation gestalt of the property verification equipment of 
claim 6. In drawing 5 , property verification equipment changes into a single pass expression the count 
tree logical expression received through the input reception section 211 equivalent to the logical 
expression input means 121 by the single pass expression converter 212. Furthermore, it has the 
composition of verifying the inputted property, by presenting processing of the set operation section 
214, after changing into the procedure train later mentioned by the procedure train converter 213, and 
judging whether the obtained condition set is empty by the judgment processing section 215. 
[0038] In the input reception section 211 shown in drawing 5 , the operator distinction section 221 has 
composition which sends out this count tree logical expression to the initial-state adjunct 223 through 
the direct or negation processing section 222 according to the operator of the head of the received count 
tree logical expression. Here, the operator distinction section 221 sends out the whole count tree logical 
expression to the negative processing section 222, when a top operator is a operator "A" which shows all 
**, and on the other hand, when it is the operator "E" which shows existence, it should just send it out to 
the initial-state adjunct 223 as it is. 

[0039] Moreover, in drawing 5 , the negative processing section 222 denies the whole count tree logical 
expression received from the operator distinction section 221, and has composition which transforms a 
required formula according to a logical operation regulation, arranges count tree logical expression, and 
sends out the obtained count tree logical expression to the initial-state adjunct 223 further. By adding the 
propositional-logic type pi corresponding to an initial state to the head of the received count tree logical 
expression, this initial-state adjunct 223 makes the initiation event of a verification activity an initial 
state, and has composition which sends out this count tree logical expression to the single pass 
expression converter 212. 

[0040] Moreover, in the single pass expression converter 212 shown in drawing 5 , the formula 
deformation processing section 224 transforms this count tree logical expression according to the 
transformation rule held in count tree logical expression from the input reception section 211 mentioned 
above at reception and the transformation-rule storing section 225, and has composition changed into a 
single pass expression. What is necessary is here, just to store in the transformation-rule storing section 
225 the transformation rule shown in a formula (10) from a formula (7) using the propositional-logic 
types p and q showing a condition set, and the subexpression f of count tree logical expression 
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mentioned above as procedure R which changes count tree logical expression into a single pass 

expression. 

[0041] 

R(p**EXf)=pR (f)».(7) 

R(p**EF f) = {R (p**f), pTrue* R (f)} ... (8) 

R(p**EG q)=(p**f)qomega ... (9) 

R(p**E (q U f)) = (R (p**f), pq* R (f)} - (10) 

From the formula (7), the repeat of the finite time of the propositional-logic type p and an infinity time 
is bundled with a characteristic sign "*" and a characteristic sign "omega", a division is bundled with a 
brace an example and a case, and the formula (10) is shown. 

[0042] Moreover, the formula deformation processing section 224 should just perform transform 
processing to a single pass expression by detecting the part which suits the transformation rule 
mentioned above from the received count tree logical expression, and applying the corresponding 
transformation rule, respectively. 

[0043] Here, a single pass expression is the condition set train which the condition set train used as an 
endless loop connected with one condition set train without branching, or one condition set train without 
branching, and the set S of the single pass expression s is defined as follows using the set P of the 
propositional-logic type showing the condition set of arbitration. The condition set p which is p**P is a 
single pass expression. 

[0044] The connection [ train / s / which is the condition set p and s**S which are p**P / condition set ] 
ps is a single pass expression, p omega of repeats of the infinity time of the condition set p which is 
p**P It is a single pass expression. Repeat p* of the finite time of the condition set p which is p**P 
Connection p* s with the condition set train s which is s**S is a single pass expression. 
[0045] Therefore, what is necessary is for the formula deformation processing section 224 to transform 
the formula according to the transformation rule mentioned above, and just to search for the condition 
set train expressed with the single pass expression defined above. For example, when the count tree 
logical expression "AG (p->AFq)" showing the property which should be verified through the input 
reception section 211 is inputted Since a top operator is a operator "A" which shows all **, the negative 
processing section 222 operates according to the directions from the operator distinction section 221, 
and it is drawing 6 (a). So that it may be shown By arranging, once denying the inputted count tree 
logical expression, the count tree logical expression which does not contain a operator "A" is obtained. 
Furthermore, propositional-logic type pi corresponding to [ to the head of this count tree logical 
expression ] an initial state by the initial-state adjunct 223 It is added and processing of the formula 
deformation processing section 224 is presented with the obtained count tree logical expression. 
[0046] According to the input of this count tree logical expression, the formula deformation processing 
section 224 operates and it is drawing 6 (b). It is drawing 6 (b) by setting and arranging to the 
subexpression attaching and showing a slash, respectively with the application of the formula (8) and 
formula (9) which were mentioned above one by one. The shown single pass expression is obtained. 
Thus, when each part of a single pass expression converter 212 operates, the function of the expression 
conversion means 122 which stated by claim 6 realizes, the count tree logical expression which received 
through the input reception section 21 1 can change into a single pass expression, the function of the 
single pass expression input means 111 which stated by claim 5 can realize as a whole, and it can offer 
to the processing of a procedure train converter 213 of corresponding to a procedure train conversion 
means 112. 

[0047] In the procedure train converter 213 shown in drawing 5 , the formula deformation processing 
section 226 has composition changed into the verification procedure train which describes a single pass 
expression below according to the transformation rule held at the transformation-rule storing section 
227. Here, a fundamental verification procedure train is the operator Img which is constituted by only 
image count and shows the propositional-logic types p and q and image count. And the operator gfp 
with which the maximum fix point and the minimum fix point are expressed, respectively and lfp It uses 
and is expressed like a formula (1 1) to a formula (13). 



http://www4.ipdl.jpo.go.jp/cgi-bin/tran_web_cgi_ejje 1/13/2004 



Page 8 of 11 



[0048] 

FindTrans(p) =Img(p) ... (11) FindTrail(p, q) =lfp Z. [p**Img (q**Z)] ... (12) FindLoop (p) =gfp Z. 
[p**Img (Z)] ... verification procedure FindTrans (p) shown in (13) types (11) It is the image count itself 
and is just drawing 7 (a). It is the procedure which returns the condition set which can reach by 1 time of 
the state transition from the condition set expressed with the propositional-logic type p so that it may be 
shown. 

[0049] Moreover, verification procedure FindTrail (p, q) shown in the formula (12) is drawing 7 (b). It is 
the procedure which returns the condition set (a slash is attached and shown in drawing 7 (b)) which can 
reach from the condition set expressed with the propositional-logic type p via the condition set of which 
the propositional-logic type q consists so that it may be shown. Moreover, verification procedure 
FindLoop shown in the formula (13) (p) Drawing 7 (c) It is the procedure which returns the sum-set (a 
slash is attached and shown in drawin g 7 (c)) of the subset which constitutes the loop of which it is 
contained in the condition set expressed with the propositional-logic type p, and the propositional-logic 
type p consists, and the subset which can reach from the loop so that it may be shown. 
[0050] Moreover, the transformation-rule storing section 227 stores the transformation rule S expressed 
like a formula (14) - a formula (18) using the single pass expression s and the propositional-logic type p. 

S (p) =p ... (14) S (sp) =FindTrans(S (s)) **p ... (15) S(sp*) =FindTrail (it FindTrans(es) (S (s))) p) ... 
(16) S(spomega) =FindLoop (FindTrail(S (s), p) **p) ... (17) S({s**p, sp*}) =FindTrail (S (s), p) ... 
(18), therefore the formula deformation processing section 226 should just change a single pass 
expression into a verification procedure train by detecting the portion which suits these transformation 
rules from the received single pass expression, and applying the corresponding transformation rule one 
by one. 

[0051] For example, drawing 6 (b) When the formula deformation processing section 226 applies a 
formula (17) and a formula (18) one by one and arranges a formula further according to the input of the 
shown single pass expression, as it is shown in drawing 6 (c), it can change into a procedure train. Thus, 
what is necessary is whether a condition set is empty class and for the set operation section 214 to 
perform the image count and fix-point count which were shown in the formula (13) from the formula 
(11) mentioned above, to ask for the condition set expressed with a single pass expression, to input it 
into the judgment processing section 215, and just to judge according to the input of the acquired 
procedure train. 

[0052] Thus, the property verification equipment which applied the method of claim 1 is realizable. 
When state-transition relation is expressed functionally and the magnitude of a binary tree decision 
graph is reduced since these procedure trains can be performed only using image count as mentioned 
above, set operation processing can be performed using the throughput of a realistic computer system, 
and it can verify whether the property which can be expressed with a single pass expression by the 
model of a logical unit is realized. 

[0053] Since it can be compatible by this in the control of the amount of memory and the compaction of 
the processing time which pose a problem about the property in which a single pass expression is 
possible in case the symbolic model inspection technique is applied, it becomes possible to apply the 
symbolic model inspection technique to property verification of a logical unit with realistic magnitude. 
[0054] Here, as mentioned above, a single pass expression is possible for most properties for which 
verification is needed in an actual logical unit, and it can increase the efficiency of the whole verification 
activity substantially by attaining the increase in efficiency of a verification activity with the application 
of the technique of this invention to the verification activity of these properties. Furthermore, it is also 
possible to change count tree logical expression into the procedure train directly mentioned above. 
[0055] The operation gestalt of the property verification equipment of claim 7 is shown in drawing 8 . 
Property verification equipment is replaced with the single pass expression converter 212 and the 
procedure transform-processing section 213 shown in drawing 5 in drawing 8 , it has the transform- 
processing section 216 equivalent to the transform-processing means 123 stated by claim 7, it changes 
into the procedure train which mentioned above the count tree logical expression received through the 
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input reception section 211, and it has become with the configuration with which processing of the set- 
operation section 214 is presented. 

[0056] In this transform-processing section 216, the formula deformation processing section 228 has the 
composition of changing count tree logical expression into a procedure train, according to the 
transformation rule held at reception and the transformation-rule storing section 229 in the count tree 
logical expression with which the property for verification is expressed through the input reception 
section 211. This transformation-rule storing section 229 stores the transformation rule T expressed like 
a formula (19) to a formula (23), using the subexpression f of the propositi onal-logic types p and q and 
count tree logical expression as transformation rule from count tree logical expression to a procedure 
train. 
[0057] 

T (p) =p ... (19) T (p**EX f) =FindTrans (p) **T (f) ... (20) T (p**EF f) =FindTrail(p, True) **T (f) ... 
(21) T (p**EG q) =FindLoop (FindTrail (p**q, q) (**q) ... (22) T ()) [ p**E (q U f) =FindTrail(p, q) 
**T(f) ] ... (23), therefore the formula deformation processing section 241 detect the subexpression 
which suits the transformation rule mentioned above from the received count tree logical expression, 
and should just apply the transformation rule applicable to each subexpression one by one. 
[0058] In this case, drawing 6 (a) As shown, it is once denied by the input reception section 211. 
Moreover, propositional-logic type pi about an initial state It responds to the input of the added count 
tree logical expression. The formula deformation processing section 228 operates and it is drawing 6 (b). 
By applying the transformation rule shown in the subexpression shown by the underline which set and 
attached the.sign bl and the sign b2 by the formula (21) and the formula (22), respectively, it is drawing 
6 (c) directly from count tree logical expression. The shown procedure train can be acquired. 
[0059] Thus, it becomes possible to realize the property verification equipment which applied the 
method of claim 3. In this case, by changing count tree logical expression into a procedure train directly, 
it becomes possible to reduce the procedures which constitute a property verification activity, and it 
becomes possible to shorten further the processing time which the whole verification activity takes. 
[0060] Next, how to verify also including the property which is not possible for a single pass expression 
is explained. The property which is not possible for a single pass expression is expressed with the count 
tree logical expression containing the subexpression which is not convertible for a procedure train by the 
transformation rule R mentioned above and transformation rule S, and in order to verify the property 
expressed with this whole count tree logical expression, it needs to apply reverse image count about 
such a subexpression at least. 

[0061] Here, a reverse image count result is expressed with the propositional-logic type showing a 
condition set. Therefore, if the reverse image count about the subexpression which is not convertible is 
preceded and processed and this subexpression is replaced by the propositional-logic formula showing a 
reverse image count result Conversion in the procedure train which mentioned count tree logical 
expression above as a whole can be enabled, and the result of an operation equivalent to the case where 
it asks by the conventional method according to the original count tree logical expression is obtained by 
performing the set operation using image count according to this procedure train. 
[0062] The operation gestalt of the property verification equipment of claim 7 which applied claim 8 to 
drawing 9 is shown. In the property verification equipment shown in drawing 9 , while the substitute 
processing section 217 replaces the subexpression which is not convertible for the procedure train 
included in the count tree logical expression received through the input reception section 21 1 by the 
suitable propositional-logic type and presenting processing of the transform-processing section 216, it 
has become with the configuration of presenting processing of the reverse image computation section 
218 with the corresponding subexpression. 

[0063] Detecting the subexpression which cannot apply the transformation rule mentioned above from 
the count tree logical expression which received the subexpression detecting element 231 in the 
substitute processing section 217 shown in drawing 9 , the sign allocation section 232 has the 
composition of replacing the corresponding subexpression with the sign which shows a meaning 
propositional-logic type in count tree logical expression, and presenting processing of the deformation 
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processing section 216 with it. Here, the subexpression detecting element 231 should just detect 
subexpressions other than the tense logical expression shown by the left part of a formula to a formula 
mentioned above. 

[0064] Moreover, the propositional-logic type in which is asked for the condition set shown by the 
subexpression which the reverse image computation section 218 received using reverse image count as 
usual, and the synthetic processing section 219 shows this condition set receives, and it replaces with the 
corresponding sign which is contained in a procedure train, it substitutes in drawing 9 , and it has 
become with the configuration which offers to processing of the set-operation section 214 in the 
acquired procedure train. 

[0065] Here, the propositional-logic type itself does not change in transform processing to the single 
pass expression from count tree logical expression, and transform processing from a single pass 
expression to a procedure train. Therefore, by changing into a procedure train the count tree logical 
expression which transposed the subexpression which cannot be changed as mentioned above to the sign 
which shows a propositional-logic type, and replacing the sign contained in this procedure train by the 
propositional-logic formula showing a reverse image count result In the logical expression input means 
111, this subexpression can be replaced by the propositional-logic type obtained by performing reverse 
image computation about the corresponding subexpression, and a result equivalent to the procedure train 
which presents transform processing with this count tree logical expression, and is acquired can be 
obtained. 

[0066] That is, the subexpression detecting element 231 of the substitute processing section 217 and the 
reverse image computation section 218 can realize the function of the separation means 125 stated by 
claim 8, and the reverse image count means 126 in this case, respectively, and verification of the count 
tree logical expression which realizes the function of the synthetic means 127 stated by claim 7, and 
contains the subexpression which is not convertible can carry out by the sign allocation section 244 and 
the synthetic processing section 219 as it is possible. 

[0067] Hereafter, actuation of the property verification equipment shown in drawing 9 is explained 
about a concrete example, since a head is the tense operator E which shows "existence" when count tree 
logical expression "EG** (p**AGq)" is inputted into the input reception section 21 1 - drawing 10 (a) 
Propositional-logic type pi showing an initial state in count tree logical expression as it is so that it may 
be shown It is added and processing of the substitute processing section 217 is presented. 
[0068] According to this, the subexpression detecting element 231 of the substitute processing section 
217 detects a subexpression "AGq" as a subexpression which cannot apply the transformation rule T 
mentioned above, and the sign allocation section 232 assigns sign q' which shows a propositional-logic 
type to the subexpression "AGq" received from the subexpression detecting element 231, and should 
just replace it by it (refer to drawing 10 (b)). After applying the transformation rule which showed the 
whole count tree logical expression in the formula (22) by this at the count tree logical expression with 
which it became convertible into a procedure train, and the deformation processing section 216 was 
obtained according to the input of this count tree logical expression, the procedure train corresponding 
to ( drawing 10 (b) reference) and count tree logical expression is acquired by arranging a formula 
further. 

[0069] Moreover, when the reverse image computation section 218, on the other hand, performs the 
same reverse image computation as usual according to the input of a subexpression "AGq" mentioned 
above, the propositional-logic type showing the condition set expressed with a subexpression "AGq" is 
called for, and is inputted into the synthetic processing section 219 with the procedure train mentioned 
above. It responds to this and the synthetic processing section 219 is drawing 10 (b) about this 
propositional-logic type. By substituting for sign q' contained in the shown procedure train, and 
presenting processing by the set operation section 214, the condition set which fills the property 
expressed with the original count tree logical expression can be asked, and processing of the judgment 
processing section 215 is presented with this condition set. 

[0070] Thus, it becomes possible to realize the property verification equipment which can verify all the 
properties expressed with count tree logical expression by applying the method of claim 4 and applying 



http://www4.ipdl.jpo.go.jp/cgi-bin/tran_web_cgi_ejje 



1/13/2004 



Page 11 of 11 



reverse image computation only about the subexpression which is not convertible for a procedure train. 
In this case, since the count tree logical expression showing a property is a part very much, that reverse 
image computation is applied can shorten substantially the processing time spent on reverse image 
computation compared with the conventional method which applies reverse image computation to the 
whole count tree logical expression. 

[0071] Therefore, as it mentioned above, in a realistic computer system, it becomes possible using the 
symbolic model inspection technique to verify all properties, and the property verification equipment 
which can verify the model of a logical unit logically from various viewpoints can be realized. Since this 
becomes possible [ not leaking and discovering the inconvenience of the specification etc. in the earliest 
phase of layout of a logical unit, ] and the acquired information can be fed back to layout, layout of 
large-scale LSI, a computing system, etc. can be supported powerfully, and the increase in efficiency 
can be promoted. 
[0072] 

[Effect of the Invention] Since it becomes possible to verify about the property by which the single pass 
expression was carried out only using image count according to the invention method of claim 1, and the 
invention equipment of claim 5 using this method as explained above, in the symbolic model inspection 
technique, it is compatible in the control of the amount of memory and the compaction of computation 
time which are obtained by function-izing state-transition relation. 

[0073] It becomes possible to realize property verification by the symbolic model inspection technique 
using the computer system which had a realistic throughput by this, and in the earliest phase of layout of 
a logical unit, verification which does not have leakage about most properties can be performed, this 
verification result can be fed back to layout, and layout of a logical unit can be supported. 
[0074] Furthermore, if invention of claim 2 and claim 6 is applied, it will become possible to perform 
efficient symbolic model verification about the thing in which a single pass expression is possible 
among the properties expressed with the count tree logical expression generally used as an expression of 
a property. Moreover, if invention of claim 3 and claim 7 is applied, it is possible to shorten further the 
time amount which reduces procedures required for a verification activity and processing takes by 
changing the inputted count tree logical expression into a procedure train directly. 
[0075] Moreover, when applying invention of claim 4 and claim 8 and the subexpression **** count 
tree logical expression which needs reverse image computation is inputted as a property for verification 
on the other hand, reverse image computation is selectively applied to the corresponding subexpression. 
After changing into a propositional -logic type, by verifying the whole count tree logical expression, it 
becomes possible to apply to verification of all the properties that can be expressed with count tree 
logical expression, and the versatility of the property verification method and equipment can be 
improved substantially. 
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* NOTICES * 

Japan Patent Offic is not responsible for any 
damages caused by the use of this translation. 

l.This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2 **** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is drawing showing the principle of the property verification method of claim 1 and claim 
2. 

[Drawing 2] It is drawing showing the principle of the property verification method of claim 3 and claim 
4. 

[Drawing 3] It is the principle block diagram of the property verification equipment of claim 5 and claim 
6. 

[Drawing 4] It is the principle block diagram of the property verification equipment of claim 7 and claim 
8. 

[Drawing 51 It is drawing showing the operation gestalt of the property verification equipment of claim 
6. 

[Drawing 6] It is drawing explaining transform processing to a procedure train. 
[Drawing 7 1 It is drawing explaining a basic procedure. 

[Drawing 8] It is drawing showing the operation gestalt of the property verification equipment of claim 
7. 

[Drawing 91 It is drawing showing the operation gestalt of the property verification equipment of claim 
6 which applied invention of claim 8. 

[Drawing 101 It is drawing explaining transform processing to a procedure train. 
[Drawing 11] It is drawing showing the example of a finite state machine. 

[Drawing 12] It is drawing explaining the processing time of the conventional verification procedure. 
[Description of Notations] 

111 Single Pass Expression Input Means 

112 Procedure Train Conversion Means 

113 Data-Processing Means 

1 14 Judgment Means 

121 Logical Expression Input Means 

122 Expression Conversion Means 

123 Transform-Processing Means 

124 Reception Means 

125 Separation Means 

126 Reverse Image Count Means 

127 Synthetic Means 

211 Input Reception Means 

212 Single Pass Expression Converter 

213 Procedure Train Converter 

214 Set Operation Section 

215 Judgment Processing Section 

216 Transform-Processing Section 
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217 Substitute Processing Section 

218 Reverse Image Computation Section 

219 Synthetic Processing Section 

221 Operator Distinction Section 

222 Negative Processing Section 

223 Initial-State Adjunct 

224, 226, 228 Formula deformation processing section 

225, 227, 229 Transformation-rule storing section 

231 Subexpression Detecting Element 

232 Sign Allocation Section 
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[»3»ie ] «*^5Ccie«©7-aAf-^^iE^g{c 
tf-'ixftglAJj^Ktt. 

^E*fft©7-D Af 4 ^mtsm^m^ixtitm 

4 «*. fc««r* s c 4 **sa4 -r -2. 7' a a f- 
[1*3*997 ] IS«WSfll)!5tS*S©«rf / P?r^-rSI®t«Jiffl 

*s**. mm±mzm-?y'nj<?- 4 zmtcbx^zfr&fr 

n^©7'D^r ^ *ii*fttMc»BX4A#-r*» 
ffiSArtmfc. 

3r^©^fe*i|ijccfi£ o r . WiBitJM^I&as;*^©* 

4. 

wt e*ns t ^j-ctS s Wc&£& t(cffi-,t, irswitt 
*WLt*ffixtcct*mkt?z>7\ij^4mgm.. 

CW^8 } »*I|6S)ttti»*S7^IE«©^OA 

iSa^A^^Stt, 

7o ;<f ^ ^rtfgt^a&asiwA^^swaxsswffi 

0#S4. 
4> 

mi&m&ci(jLxmmm>&mzmmL> tmmsz 
Bufe^jHifeas; 4 Birge-e-©fte©it©7Ki§as4 4^ 

#S 4 ilifcilSTft h c 4 ««ftt 4T h 7'n ^ 



(3) 
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imo&MKtffli] 

[0 0 0 1] 

M= (Q, I, 4>, S , A, I ) 

tz>m£&$>tnmti,x ^wwMiit io 
o^msciKj:^. <x<DWMz : m>z>m®.-cfoz>. c 
cx\ ±x<D^\m\\mmmz, mm^mmmmm 

o{±mt Lxfimttm®ffizm>2>jsm&&< rat^n 

agg©*f^©t£IEttilB. WfUfl&ttlfKIH-r-Stfc 20 
Ef^lt*>63^l©HI8©»ffKWrS*aEff**T. ft 

{±8©&iEtt. s&a^g©IMf ©Sfcipl^mtcfctt 5 
[0 0 0 2] 

[8E*OS«] ISS^g©ti^tt1i«r^lIT€»^?SiU 

tb. *#<wt. ^a->5^u-^ 3 >^ffiiffjs 
B. tfeilgg©t7 : ;Kc>PtL'ri@^))5:A^ ; Sr»nx.ri&s 30 

»a$®©*f\>u©iEatt*tfcaETS#ftr*s. 

[0 00 3] l^fcim, i&ffi^5»U-^a>#ffi"C 

rt«ci>. enfetter. ^sw«aE#ffi». t&agg 

© * r ;l/*Jjc©^Rt«8«tS*« #9fc L T b > ft 7"D ;<f * 
fc^Lr^Sfrgfrfctm^cffcHTSfc©^**.,, 40 
[0 00 4] fcfe. JBSWflSEfclHL-Ctt. Mil if. 

ra&aiwMS{cs-5<^e f j^iiE^ffij to. kp. 

tf$RMii. Vol. 35(8) :pp710-718, 1994 (feTF, ~%ffi.lt 

■C^f^iB-f^^tftS^ffii, jil8©A^JCc*fl£: 
■T^ < Sffi^ff £}£3S U fc to - * - h v h > tc J: -o r ? 
D^'-f-f SrStgitf SE»S£flaE^6 (R.Hoiati .R.K.B* 
Imaqe({q 0 })={q„,q 1 ,q ; .q,} 
Imaqeaq, ,q,}) = {q , , q 3 , q s , q 6 , q , } 



-\--7\-ytbxmmsti. wm<ds&q. \t>7>\>? 
^na^Afcio'ttSi^^ 1 ©6 Jiffl-cse ( 1 ) © 
• • • (i) 

>K rayton.and R.P.Kurshan. "BDO-based debuqqinq of de 
siqns usinq lanquaqecontainment and fair CTL." In 
Proceedinqs of the Conference on ComputerAided Ver 
ification,1993) ifi^M$tlX^6 a 

[0005] mummE^moo %tm^f^ni3t^ 
it. Kripk<M&ommmm*T)i%mmm®L*m>x$i 
-%b, ftn^Mxmzntcitmm&tzQxte^v- 
a *»5*vfe as* * e £ k j: o . mass 
mo*7-)im±mzm!i?zfrm~zmi?%^mx-i!i> 

6, CCX\ Kripketti&K£B. tttBoWHSS^ S itt 

im®m®w% r t mmw&&(Dm£ s . t &vm?m 
ttezmnftmom^Ltzm^x. se (2) ©j^k 

[0006] 

K= (S, R, S. . L) • • • (2) 

ttc ftu*ttaB. mm^mo-mx&'o, mn<oi$> 

ni-Ett&c, r^o^j zm.?nmm-i-v . n> 
-oh 1 *mmmw-*G, r&Kj zmmmtmi- 
xfcj:f>- r$rj zm?mmw.*uzm^xmtx 

[0 00 7 ] m *.« . KftBHaA G a B. fi]W«!SS* 6 

t^ur^s. t ©*§£«. tfeaggo^^Kcfc^ 
*©ii®5©^r3!iiisasa*sfi£j£L/rt>sttSiK:aD« 

[0008] -r^to^, IB#*7 ; ;HftS^StcfcWS«| 

t, f±«*^rim*^as;^fiSii-re^sA^5gigr 
z>itmx&*-. C©f^B. it#^a©s;?:ffl^/c* 
7 t ^±©ft/J^tt.^*St,>««^«l^«r5j<»5ll^a 

{q 1 ®©a^rii|apISeJ&:t«3£ft^4*»-5»tt 

#lmaqe({q})i. * S«J^^{q }iC 1 0©ttSgjg& 
TiiianIffi&ttflMi^43R»sa»»9f#Imagtf 1 ({q }) 
i ^iffl^^bii S C t KcfcoTHigSft'S. 
[ 0 0 0 9 ] {?a*.«\ 01 HCTKf^K, 9o©<ji;8S 

q 0 -q, fa©t^a^-c«sn*ffi!gt^«tfi©tN{c 

(3) *»6S (6) iCnkt. 



(3) 
(4) 



5 

Image -1 ({qo})={Qo 

Image" 1 ({q s })={qi ,Q 2 ,q* ,q 4 } 

c©0i itc^u/c*Htt»««ec*ji»r. 0M.B, tt 

t>„ 10 

[0010] iC5t, HIS©sB^f r JHft3t#ffi«:*J 

y ^ ^ -cstsrr s c ct ccj: 5 % ftaH£%a©ftttfi:tf 

d^ftfC^ (R.E.Bryant. "Graph based algorithm fo 
r boolean function manipulation." IEEE Trans. Compu 
t. ,C-35(8):pp677-691,1986.) 0 

[o o i n at % wafflz%®#&&tniz»atcm 

[0012] 

[ooi3] bftbte&h* combat, 

7 7<DmM*7jkts-m&, jjjsatacitmi>x*s 30 

9. «©»££«. ^-KftPA*M©it*fcJoi; 
rf^SBBttttfc^f*. C©fc«>. jll&ffl©*^© 

[0014]il2JC^m 300MB feU:©jrf*'Jg 
B, vpp.pipe-l) jCO^TB, KarSBCC^space 
»»Sy770SBil©li/jN4Hofci»^{CB % mi 2© 

<*tAT£o *©-;£, ffi^f^M^^ffifCfc^T 

or^fflsnr^sfcft, *fctt»KK*aHM©»* 

£ *)» 50 



«FgB¥ 1 0 -6 3 5 3 7 

6 

• • • (5) 

• • • (6) 

[0015] CCDtcib, SE*©*ffi**©**J8(,»fc© 

g©Haga*ftSE-r 6 C <t <b ^ £V * ft fc. 
[00 16] tC6V. ±ifeLfcfiE*©f«iC*$Cvt 

iLWS. L*»0ft#6. i&aKBlcteOT&aELfc 
t, > 7" p Af* * b , 8t»*»ffl«: <£ -? r &i njffeft ^* 
r -r © C < & c t tfiMfflftlcftfr o TO S. 

[0017] «*B> B^ffliiS^ r E F pj b. 

6 §&as p 0 ±Lr>tmm& q p k sbi oieir 
e^oTfe^ »as;ptcj:»3, ttass^K 

0 t b& 6 ft o*t±«»*iR b t , ifea^g©* fonw 

*±tOI8 CC Pfi 6 ft ^ S © ^ D />' r *«BE-f ^5 »^ Sc i* 

q) j a. riftaap3^ofi-3««M^©5%, wr 

tt»^6i9»Wffift»»«^6, f©<t 5 ft^x^a 

r> /c 4 u r fcifc^nas q 0 jiotfc«ii^«r a s j 

C£g^S-r^i©7'DAf*^ tWiErstl^fttfcc* 

[0018] _ta!o/cB#fi^a^: r e f pj <omm\t. 
fc— Bstaaias;© tagcp-af q) j swb, 

tc, M*^q#JjR94^-^KMS«lBJ||^i4ft 
^> 0 C*i6©KM«^JB, C>r*i«>tt»*ti©ftlr»- 
*©tt«*^J*SC»BC©<l: ^ ft-*©«^*^?ij© 

*atcj»R;u - ^4 ft zvtmmsfwms l tcffif&t ft 
m*6^iwwsc t^ojteft^u^f-^ * 

[00 19] 4t3*£\ *^C>©«l®CcfcnB, ±a 
r ;l/ tcfct^ r «i SE^*©*f * 4 ft ^ n *i f - ^ © 9 0 ^ 
Uc^ot, ^— ^^S©7'nAf"^tcWr*^ 

BE*^fc-rsc<fc^r#nB. a&asgi^T^otesE 

[0 0 2 0] *«B8B, IB^r ^tfe2Stcfcor, ^ 
* U ««©«^i«! f afl$lffl©5S» <b * P52 oje6ft >^a / ^ 

[0 0 2 1] 

immzm®:? z>tc*b<D&m m 1 ca),(b) a t h#ji 

1 teJ:^li^2©7 , u^ , 7 u ^ ^^©Mffl^-TH 



[0022] M*a i comm. ffliBmsfmA<Mffi 
r. WRtt&wfajif-j tox. 8#a>tt©&c>— $ 

©tt.«*£5>J* S l » «&#>!>>ft©fc t >-#©tt»*£7lJ 

[oo23] smm i omm, xtuntcm-'^m. 

ft *> C tic £K> 7'an-f 4 4if fc-ftft!S£4*©, C 

<Dwm-&ft£m£x&z,fr : gMcm'3^x. va^j- 

fflfflt/t. *©i*Efl**j»*se&#rfc3a>6. 20 
12^*7* jutfcfiffiK *ji > r . vm&mmi&cDmm t«c «t 

[0024] IS^JJ 2 ©IMBtt. f(^j| 1 fcieigw^a 
ttfSiU-C, IMMcawI3C**A*Sti. B>rS©£&*afll 

©16MB. 9m*&m£*m->iz.mi< l ck$iLx> # 30 

«S^5«^©^Mffl«:m-r*C tifiX-ZZfrh, ItSI* 
fiffl^-C^^nfc^o^-f- -r ©&fEKm>£ c t *SpJt6 

[ 0 0 2 5 ] 02 (a),(b) «. fMOf 3*5 «fcCM»5j?JR4 
©ynAfv&IE:£ffi©Kffi4^'rig|-C*.&. ff*S3 

©«w«. mm^mmmom^mt^mmmm 

i)\ mzit&Zmtzfnt-iriZffitcLX^Zfr&frZ 
mtt^y'o^y- a tfcaDjffiJc*$(,>T t ^u>Fta©7"n 

3£©SaftSJWcfl£-5T. IHf*i&SSC?:WIBtm««(K: 40 
*itt S«ti-)f Mil©*r||ff nJBE&§r £©##* 4ii# 

[0 0 2 6 ] M3&S3 ©fEHfltt, ift?*a&Il5$4iH8 (c 
*»*5>JK^ft-j-5jiS**it. £ C £ K J: »j . IflMMft 
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4E«C#*ft?*C £#"<?*.&. fil*«4©»Wtt. 89 
3fcJf 2 * /cB»*J13 KISffcDr/cm-?-., l*iE£&ft*$ 

*a«9i«©awi3&i£*a:»»sci *©<fi©tt»*»a 

«£«:»* U »»S«:oi»ra!«(trtMiia*llffO 

*©fl&©if-**»JiS i 4£f& L X . «K©«JUc«-r 
SC£4*SN§it£T£. 

[0 02 7] M$94©ft93tt. ffH*flUl5£©-§|S© 

mov'o^f-Aic^xomm^mm-r^ctffix^ 

><^4tf^*£*4c£#nJMj4&S. 
[0 02 8] 03«. W*^5fcJ:0'rt#iI6©:7 - cm- 
f" *$II3)Sg©Jf S4^;-f IST-ife 3 0 it*JI 5 ©IPJ3 

tttiii&?-7V'*f- ■< ZmitLX^Zfr&fritiffitZ 

Or, ft^n©J5:^-2|i:0ttSg*^J*'S^tttt^* 

n©&i >-*©t^m^?'jcc^Rg^- u rdi^ 

lit. *-><**»*Si3£©#l»**« 
*KiB^-iifc*«*5UK:g6»-r s*«s* J>J»ft*a l l 
2i, ^t?iJ-C^$n/c§^tKSe-oT. flfBBttSI 

ts«tc*j » z&nnmmzmi l x . m—*x$mtn 

13i, »6tlA:t«B«^*Jaj|^ , C*4* 
5*»*«£T5«e*« 1 1 4 i 4«ifcc <t*H«4 

[0029] H*3S 5 ©^HJ« > ^Stt^K^IK 1 1 

2(cj;o. m-'izmiAttm 1 1 i*^ltswk 
««£*ai 1 4©»atcttt-r sciKj:'}. n^jRi 

Xvk2h2>y'n^f-<zmitz>c.tfrxzz>. 
[0 0 3 0 ] CtilCk 0 . m-^*mfflmtj:7a'iT 

^(coi,)Ttt, «f+#^a©*4*jfflor t *©^Hfp 
^4^-rsct*s-c#s*>6. le-^^er^s^tcij 
c^r, ttSK»H»©Ha<fc«:j:S-»9«£y77©« 

^h4 mm u tc c <t «: j; & ^ * -j ^©is/hi mhb# 

ffl©®ffl 4 4WS-T ^ C i *5 BJ j£ i ^ 5 o 
[003 1] if5}?lI6©^tt, IS^5 Ki2i£©7 - n 
^^^SE^Kteor. m-^-x^ilA^ISl 1 1 
«. 1^iiE^a©'7 - D^-7 : -^4^Tit@7tcf6aS;4A^-r 
S»SSA^©1 2 1 i. ^©^^ffiiijtc^or, 

im*i&iiS4^-^^«3stc^L, *«*?ijsaft^ 
K 1 1 2<D9mtcmz>m&ii&Et 1 2 2 i«x? c 



(6) 
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[0 0 3 2] M*JI6 »«5Jyjj#8 1 2 1 

fC <fc *ir)M«MI3© A* KG 0 X . ^Jg^^K 1 2 
2 #«fft •$- 5 C £ it J: 0 , ff-l^ilg^T-gl $ ft ft: 7" cz 

osteins <D7'a^7- a tksmmiommzmtmx-iib 
mmmwv, ®mi±mmirya>iT izmtcbx^ 

A^iai 2 1 £. §fS©^MIijKfi£or, fr#*i& 

z>%.&mmm 1 2 3 1, ^*?"jr**sn/c§^t 

[003 3] l§*JS 7 ©mBJltt, ^&®a* et 1 2 3 
**. f&asujj^K 1 2 1 £/rUr£ttBX-?fcftll*al 20 

ft*. l»#*8©l6Wtt. l»*lI6*/c»i»*lI7KIB 

m®7n*?4ffimmtt$^x> fsasiA^fs 1 2 
1 «. t«tiw*iftaa©A*t»wiR* 

«wko #® 1 2 4 £ . im*i&fflS;?r^lt#«ia© 
JW*yj* £ § ft * £ *©ffi©ff»*IMISC £ K 
2 5£, ^SKtftraMHfHMi 

3HMS1 2 6 £. ^SHMSe£^©ffe©lt»7Kii&aSC£ 

7-p>>^ 4 £*-rit#*s&a5U o-tawrr 
z&mmi 27 tzffix.tcmmx-3>zctz<®mt? 

[0034] M$g 8 ©&IJH«. 1 2 5 i)\ * 

wwo^ai 2 4*^i/-c**Bsiofcit»*asaic©- 

«5*»liL-Cji!iat**ftl2e©*Ki«:«l/. £f8.3- 
13 1 2 7 K<fc 9 . jE«tf-»Tff ^nfc^gi^IiS^TC© 

ttasKsaw- c £ #-c * s . 

[0 03 5 ] CftCC<fc9. ^*f&£&S7 r p/-5?-.fK: 

^m^oKMc^cxmnm^n^ c i#-c*s*< 
e . iaffltttcsftfc 7 - o ^- f - ^ ^n^g^nii-r 3 c £ * 

R (pAEX f) =pR (f) 
R (pAEF f) = (R (pAf) , 
R (pAEG q) = (p A f ) qco 
R ( p A E (q U f))= {R (pA f ) 
S (7) frfcS (10) KfcHTB. #H9ta^P©«l6 50 
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[0036] 

[fW!©£*©i&9B] «T. affi(C«-5l»r. *3MB© 

[0 0 3 7 ] IS 5 tt. l»^6©7 - a^-f-^^iiE^g© 

HS^tt. l&aSA^ai 2 1 KffiS-rSA^aftiW 
2 1 l*^LrStfmfcttff*»aSC4#--'"C^^l 
^fe8B2 1 2K<tot$-^'XliK^L. l(c. # 
&*?iJ£fc3|S2 1 3fc.£r>X'&i&?Z$m*mc%&L 

tcmm&wm-m 1 4©&aK:{£u nztitdmm 
£#2-c*$*>50>4«£*!Hi32 1 sKio-cwe* 

[0 03 8 ] H5(C7nO/cA7J^SP2 1 1 SCfe 

?H»^iJgP2 2 i a, swKofcft»7Ki^as;©5feii 
©fH^T KtBc r , c ©n-»*a&as:«i:s* 5t,>«§ 

SiftagP2 2 2 §^L,tWiW2 2 3 tcjutH-r 
mi&tK-oX^Z. CCt, »J*M9B(|»2 2 ltt. 
5teSI©«Jf*#£f*£^?-ilt*^- r A J 

st»*»aa^#*53e«a» 222 ccgm u -^r. 
WBfflnW2 2 3(cjisa-rti«j:c>. 

[0 03 9 ] Sfc. 121 5^*51,^. S^MaSfi2 2 2 
«. ?H»TffiiJg|52 2 l*6«WK-9fctt**IMlSe:£ 

Mtc fAajiff*ifliiic^or^g^s;©s 

s= c^nw2 2 3 b, swrn-ofcu-gL^ift 
as;©5tai(cfii»3ttsi«c*tt£:-r .s^giitiascpi 

SC£CCJ:0. «®EfP*©ra^* ; &M8ttSI£0. c 

mn*Wim%*m->^m%mm2 1 2tcjnw-r€> 
«fiS£)S- J ri,^. 

[0 04 0 ] *fc. 05{C^Lfc#-AxRJgS:ftS|52 
12CC*jl>r v 5^Jf5®agB2 2 4«. ±a$L/cA*S 

gP2 2 5{c«#$n/c^jtfliJ{c^orc©it»*iia 
%*mtb, m-'izmitcgztktzimitt-yx^ 

S. CCt, $&gJWtftffl3B2 2 5tCB. It^lSaSC 

^•r ^giisas; p . q *$ J: v±m 0 fctt^TKi^as;©^ 
»Sf*ffli»rs (7) (10) cc^-ri 



[0 04 13 



p True" R ( f ) } 



pq- R (f ) } 



(7) 
(8) 
(9) 
(10) 



(7) 
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[oo42]^/c 3ggmm$i2 2 4», swa^fc 

[0 0 4 3] CCt, #--^**JB£ tt. tiiftfrtKDtj; 

«^j"C*o, fiEK©tfc®*^«:*r^WHttas;(3!)Si^ 10 

8g»£jajs£©iHgp sB. M-z^jwr**. pe 
Pr**ttMBR^P©jWBIiO«i3iiLpci) 

pepr**«a»l^p©*iRH©« 

OilUp" £seS?*Sim*£*Js£©ii«p- s 

[0045] ufc^o-c, i&mmmm2 2 4«, ±a 20 
^ «r^-rft»*a&ffls; r a g ( P -a f q ) j #a# s 

*ffl»2 2 23W«rfPU, H6(a) KtjWJ^K:, A^3 
tifc»t»*KHlS*- Mgffi L /cf^CcSil-r h C £ £ <fc * 

Fincn~rans(p)= Imq(p) 
FincfTrail(p,q)=lfp Z . [pVlmq(qA Z )] 
Findloop(p) = qfp Z.[pAlmq(Z)] 



* 0, TAJ *^S4^Sf»*aftffiS3&J»?)hS. 

jsk , mwmmm 2 2 3 k <t *) % c ©&Hwcaase 
©ague. i^tm(cttier«Miffi(pi *h*»3 

[0 04 6] c©it»*iftaa;©A*ccj£Dr . ss«» 

*M»2 2 4#ttftU 06(b) (CfcC»t, 
m*ttbXfjkt$Mtt*c> ±Mistc£ (8) te<fctfiC 
(9) *«^ck:affllyTWW-*c4«:j:0 t 06(b) 
cc^T*— ^«aajiif»6ha. c©<fc5tt:> 
St3i£»«|52 1 2©SSB*s«iffi-r*CiicJ:f3, ftsRE 

era^ss^fe^ai 2 2©«wB4iiJiL. a#§ 
Nff 2 1 1 ^bx^m^tcnm^m^m-^^ 

^HA**S1 1 1©««*I8JIU *«*MSEft*« 
1 1 2CcffiaTS*tt*y»ja»W2 1 30*HCCttTS 

[0 04 7] 05Kl^U/c^*^ftSS2 1 3 tcfcl^ 
5taSB£S82 2 6tt % SfMHBIttMS2 2 7CC& 

S*Wft*iE^»*?»Jtt, «H»<D*«:j:ort|jSSti 

o*® A^tt* £ ft/j^tt * 4 ^ ft* n^-r siat^qf p 

, lfp£ffll>T, 3I(ii)*>6S(l3)©ct^K*Sft 
[0 04 8 ] 



(11) 

(12) 
(13) 



Sl(ll)tC^U/c«fflE^ltt*Fincfrrans(p)« 4 * 3 K\ ft 
2t»*©fc©r*tK 07(a) CC^fcfc^CC, iftgii&s 

s;p r^?n/ci^i*^6-iii(D«^^riij^pitg 
* v h 6 . 

[0 04 9 ] ttc, S(l2)CC7nU/clftiE^Jtt*Findrrai 

i(p,q)tt, 07(b) (cstAiic, ^SifeilSpra^ 

esornaiwj:tfc«fe^ (07(b) cc*5t^*3wa* 

tfLTSVT) *jIT#lH*-C*S. 3;(13)CC^L*40 
S (p) = P 

S (sp)= Fin<JTrans(S (s))A p 
S (sp*) = FindTrail(Fincrrrans(S (s)),p) 
S (spo>) = FindLoop(FindTrai1(S (s) ,p)Ap) 
S ({sAp.sp })= FincfTrail(S (s) ,p) 

[0 0 5 1 ] «JA«, 06 (b) ^^Ofc#-/^gIlCD 50 



5K/cttiE*iK*FindLoop(p) 07(c) (t^Vri^t, 

AH»fflSpr^sn/ctts^i^c$*ftr*jo. ^ 
tzoh-vip m&aimte%mm^<Dmm& (07 

(c) lcto^X®MZttLX7jk?) «E'T*»*'C*4. 
[0 0 5 0 ]J/c k ^8S«fliJ1Stt«2 2 7 tt. 

^ s *$ d: Wia»as P^i^rs (14)-^; (is)© £ 
5 cc^$ ft *g&*uM s ittffl 0 ri» 5. 

• (14) 
' (15) 
' (16) 
• * (17) 
• • • (18) 

xfiic&cx. ^mmmsi2 2 6^sci7)*5<ta«(i 

So coxsicLxn^ntc^mmvAfitiCifctx* 
m^mn^2 1 jbaLfcaao*6s:ci3)«:jRb 



(8) 
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14 



[0 05 2] COJ^CbT, »#Il©2rffi*aWiO 

/cct ^(c, cft6©3^^JttMfl?©&&ffli>TirfT 

mmf vmrnti t, » r jn^ia^a * 
u ffca^g©*?^*. m-^'^^r-^-rci^Dj io 
mu 7'a / ■« f - ^ * mm b x i, > s £&fE-r * c 4 # 
■ess. 

[0 05 3] CftKJ:^ ig-^^iil^ft^cm-r 

}# os&agg© t"o - ^ mm? a c 4 # *j&t 
ft*. 

[0054] cc-c. jb«i/fcj:5K:. imvmmmm 
tc&or tfmafiti&gb ft s 7* a ^ ©a 4 ^^tt^— 20 

T(p) =p 

T(pAEX f) = Fincrrrans(p)AT(f) 
T(pAEF f) = FincfFrail(p 1 True)AT(f) 
T(pAEG q) = FindLoop(Fincfrrail((pAq,q)Aq) 
T(pAE(q U f) =FindTrail(p,q)ATCf) 

vx^mt «ti,». 

[0 05 8] C©t§£«. 06(a) tC^l/fci^tC, A 
(OoDr. $mmW$H2 2 8*WPU 136(b) (Cfc 

-en-ens; (2i)te«fco'^(22)-c^L/c^}^aij*jiffl-r 

3 C £ K ct •) , H-»*!ftase*> 6 ggCCl 6 (c) {Ctk l 
[0059] CO«fc^CCL-C. M^3©*ffi*iSffll/ 40 

[0 06 0 ] #tc, m-^ - X^DJtg-Cft^7'D^-r < 

tsibxftMtzjjmic-o^xmitz. m-'izmm 
t&mm skj;-3 x&msmteg&Tz c 4 »-c* ftt,>sp 



* «k0 . tfcffiftJB^ft***! sc^tr St 4#T?*S. 

wc. tm*i»«s:*«««:±aofc#«*^«:g6«i"r 
*>c4*>pJ1S6t*s. 

[0 05 5] 08(C. mmiOV'U^T- ■< tfcilSg© 
2 13mr. »*S7ra>^</c^*!i 

a#si 2 3K.m?zmmmB2 1 6 a# 

gffSP2 1 l*^l/-C*WW-ofclW*SWia«r±j4l / 
fc^HSWKiCSH/. Jg£if§»SB2 1 4©fcffltc0W* 

[0 0 5 6] C©^^ag|52 1 6CCte(,>T. Sl^^tt 
aSB2 2 8tt. AAStt«2 1 1 irtOrtftES**©:/ 

SB2 2 9K«8Shfc3Bft«WK:a£r>"C. tMI*lttI£ 
*^«*5>JK:ffiftr ^tgfiJti ft n> *. c ©g&SUHJ 
f&tt8B2 2 9tt. fttl*i&a5W>&3^£^©£fcSI 

flijiur. ^at&a^p, qteJ:t>'itfict:»as;©sp^ 
s; f 4ffl^r. Sci9)*>e>3;(23)©j: sjcasns^fc 

[0057] 

(19) 
(20) 
(21) 
(22) 
(23) 

'pt£<ti>, coxs&fflft&ic-o^xitmimw-ZM 

[0 0 6 1] c ct, 2*»IHS*Sm«tmsi^%^^ 

KPi-r5a»«ttt#%5ttfor«iau. c©gu^s;?:jMfi! 
WMS**^*«iwiscr«ftr*i«. tt^i&as; 

T-^ , c o^mfsmicu-j xmmzmttcmsmwz 

»fTSC4(CJ:(). ^©StllTKi&a^cftoTtfcfcfi 
S-C^&fcli^ 4 H^©SmiKS^f« 6 ft Z . 
[0 0 6 2] H9tC, !»A)<^8=S:jifflL/cM^7©7 - 
cm'r ^ taSKDXilfM$t. S9 tc^L/fc^'n 
^•T--f^E«g(Cfc^r, g&MagR2 1 7tt, A^)S 

#»2 1 1 *^i/r«tfw-»fctmt*iftaa{cft*tis 
f^br, $mnm&2 i e©saaK:^-rs4 4fecc 1 is 

^•TSg|5^S; ; Srj3!mititMaiH52 1 8 (D^miCi*? Z>® 
fi£4ft^fOS. 

[0 0 6 3] 09{C^tfcgfftMagP2 1 7CCtol,vC. 

sp^s;^tijg|52 3 i tt. swm-3fcfhMt*nas;*^± 
^SP2 3 2 B. s«^c*imt*iwis«:*ji>r 



(9) 
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mtams i». ±mbtc^^otLmxfjk$intc^ 

[0 0 6 4] */c, S9Kte^T. jS^ft»MS§|52 1 

mcmmi&zm^x:-$.i£>, ttc ^mim2 1 9 
$mmzm&m&m 1 4©&a(ct*-r £8tfiU&-3 10 

[0065] CCT, 

©gfMiafc J: O'^-^-x^^ 6f^£ ?ij^©g&*!i 

sk fc i > x Chungs; a{*«^Ytb^ci 0 u o 

Mtt^tttmcg # fc* fcltll*§ia5£ #?ijcc 
»»U C©¥«*flKS**i*fW*M«tf*l§W* 

si 1 iK*i>t, Karssu^sitcwrsjM^tWM 

a£fT^>Tf#&ftSi&Si&aSKJ:oTC©^j!C£H 20 

^msm t mmoifemznz c 4 #r * -5 . 

[0 06 6] C©i§£«, g}feMSg|52 1 7 

OW»a»ffl»2 3 1 4&&ftg®a8|52 1 8 4CCJ: 
0 . M$g 8 xm^tcfrffittSL 1 2 5 4iM&ttH3M£ 1 

tstmmm i otiao, it*^7t?a-</c^fiS^ 

131 2 7©«M6«<3iLr. »ft-C»«cC>«^C«dtr 

tt»*»aa©*aE* pjft 4 f s c i *j-c * s. 

[0 0 6 7 ] JilT, AftftftWcot^T. H94C^l/fc 30 
Has* r E G A ( p A AG q ) J #A#£tt3|52 1 1 (C 
X$>Z<DX> 01 0(a) K^T.fcSiC. itff*iftffl5£K: 

MiagP2 i KDH&mimztiz. 

[0 0 6 8] CtlK.&CX . gfeMaSP2 1 7©g|5#3; 
^ffig|52 3 IB. J:«Lfc^«fliJT>«JBrSttl>» 
aaUt/TWaS TAGq j SrfcffiU. 
SP2 3 2 «. SU»S;^tHS|52 3 1 frh&im ofcSB^S 40 

TAGqj CO, *H»«S4^J-|f#q'4»«r)S-CTH 
8Wft««U» (HI 0(b) #M) . CftCCJ:<). ItS* 

#*f&IIS^S;(22)«C^L,it^MiJ ; Srjafflt/c^. M 
KStBa-j-aciKJ:*) (131 0(b) #KK) . itn* 

[0 0 6 9] ttc-yj. AimWctmX, fAGq J ©A 

Reiser, mtmmmm 1 stm^tmrn^mm 

M»«ffll*tf5C4KJ:ij. gP^TAGqj -C£t3tt 50 
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mtthic, Gf8MW®2 1 9KA^5*i-5. CfiK 
ISDT. ^^11352 1 9*5, C©^lil&a^lll 0 
(b) {CiftLfc^SMKSShifiWq'KftA.U 

^mm^xmstitcy'a^T- a zmtc?w&m£**&> 
sciiit*, c (Dffl&mGifimimim 2 1 5 ©&a 

[0070] c<D£ncux. m*m4<Diim$:&m 

<D%M**mtmimmt s c 4 cc <t 9 . itn*na5£ 

£Ct, jM#tW*!Sli!)!!®fflStiS©»> 7'd;^^I 

nfnt*»asco c < -arc* * * 6 . ftmmm£± 
mwm\nm&*mm?zn*-m<<ttt'<x, mm 

mx*>z>. 

[0071] uct^x, ±&btc&>)K.Lx, mm 
mnmiy^T^ids^x, §m*7 : Ji>tf&^mzmm 

•r s c i ^ ojtg^ ?• a ^- f - ^ mt&w. zmm-rzcttf 

^FIBitt •) . »6nfct»«*»ttfHt«:7 ^ - K/t ^ * 
-r*C4#T?S A*1«^LS I^I+Si^^Xf 

tbzctifixish. 

[0 07 2] 

f# 6 ^ * a© wj i stJi^racjsBi^Ma-r -5 c 
[0 07 3] cnccj: •) . mmmtmmmti^n^-tc^ 

Him<DWt.&m^mK.is\,>x , ^©^f^ 

^}gT?.C4A5-c#^ < , 

[0074] S«C. »^2teJ:0*il^I6©^W4a 

ffl-rnis;. 7 - a^r-/©^4u-c-fiSM(cffl(,^nr 

t > Z> fr&KWim&xm. i htc y' a /-i =r ■< © *i % . ^ - 
X«^pjfi6*4>©{c-3t,s-r. Sa^W&fB-s^T^MfcSEfc 
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[0 0 7 5] ifc-tf, »*g|4*JJ:W»3»a8C!>»M 

[03] w^aBteiya^PBeo^a^-f-^ttaEsa 

IH4] »*S7te<tOT»^8©^DA^^*ae?S 20 

-f0-e&£ o 

[07] S^«S*»W*5Br*S. 

[0 9] »*B8©«l8*aflBUfc»3jGB8©^oAf 

[nil] WHttafcRWowi^-riar**. * 
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[012] se*©<ftBE*itt*©«ia»#pj«:ttwrsH-c 



1 1 1 

1 1 2 
1 1 3 
1 1 4 
1 2 1 
1 2 2 
1 2 3 
1 2 4 
1 2 5 
1 2 6 

1 2 7 

2 1 1 
2 1 2 
2 1 3 
2 1 4 
2 1 5 
2 1 6 
2 1 7 
2 1 8 
2 1 9 
2 2 1 
222 
2 2 3 
2 2 4. 
2 2 5, 
23 1 
2 3 2 



2 2 6, 2 2 8 
2 2 7, 2 2 9 



[03] 



[010] 



L 



/l 2 1 



/ 12 2 i 



IS 




1 


Y 1 



pi AEG (pAAGq) -*pi AS G (pAq' ) 



(b) 



pi AEG (p Aq' ) 
— FindLoop(FindTrall((plAp Aq*), p Aq')A(pAq') 



(11) 



*BBB¥ 1 0 - 6 3 5 3 7 



1] 



[[32] 



sff *« 1 *> * xm&S. 2^p/^r>f *6l#ifc ©JSCS **+B 



(a) 



(b) 



I 



Op 





T 




(b) 




[04] 



'124 



,125 



rl 2 6 



r i 2 7 



r i 2 3 



aa«*h» 2 1 1 
2 2 1 



as* 



2 2^ 



r 2 1 2 



2 2 3n 



J. 



2 2 5 



j i 



r 2 24 



213 



2 2 6. 



"""I 



r 2 1 4 



2 1 5 



««« 



(12) 
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17] 



(a) -AG (p-AF q) =-AG (-pVAF q) 
= E F— 1 hpVAF q) 
= EF (pA-AF q) 
= EF (pAEG-*q) 

Cb) _ piAEF(pAEG-xi) 

bl bZ 

-»lpiAR (pAEG— pi(Tma)*R(pAEG-^q)} 
-*apiApA-q),pi(Ttu e )*(pA-q)}(-qr 

(c) f(piAp A^q),pi<rme) *(pA-q)l(-qf 

-» PinoXoopCFindTrail(S({piApA--q), 

pi (True)* (p Aq) } ) , -«q) A~«q) 

- FittdLoop(FindTrail(FiiidTrail(pi, (True)) A (p A -*q), 

-v,)A-q) 

— FindLoopCFindTrail (FindTrail (pi, (Tru©) Ap. -q) A~n) 



(a) FiadTrans (p) 



(b) FindTrail(p, Q ) 




(c) FindLoop(p) 



ims) 



A**f+» 2 1 1 
2 2 1 



2 2 2 

1_ 



5* 

toast 



2 2 3v 



2 2 9n 2 2 8^ 



SHSMUW 



2 1 5 



[Ell 1 ] 




(13) 



1 0-6 3 5 3 7 



[199] 



HMjgttSP 2*1 i~~ 



2 2 1 



2 2 2 



2 1 8 N 









tea* 




♦Mm* 



2 3 1 



ff**13Ift_2_L_7_ 1 

/ 2 a 2 ! 



XfcfeJltt 216 

2 2 8^ 



2 2 9n 



^xz:. 



2 1 9 



/2 1 4 









2 15 

/ 



[012] 







j mmvm 


*«■# 




ata-sw 


8.9 


1 21.8 
j 


10.9 


| 202.5 


dh-1 


0,0 


! 0.8 


0.3 


i La 


dh-2 


13. 8 


j 76.4 


46.8 


J > 10000 


vpp 


space 


! space 


3.0 


| 4135. 1 


ptpe-a 


LQ.7 


| ... 


0.6 


| 387.9 


piDB-d 


space 


t space 


200.4 


! >20000 



